fix(api): harden auth/session surface (#243) - #334

Merged

thomasluizon merged 7 commits into

mainfrom

fix/auth-session-hardening

Jul 12, 2026

Commits on Jul 12, 2026

fix(api): harden auth/session surface (#243)

thomasluizon
and
claude
committed
8579504
fix(api): address review — inline refresh-token format gate + revoke-all concurrency (#243)

thomasluizon
and
claude
committed
5658611
Merge remote-tracking branch 'origin/main' into fix/auth-session-hardening
thomasluizon
committed
b2b72e0
fix(api): gate refresh rate-limit partition on a real session lookup (#243)

thomasluizon
and
claude
committed
89d2dab
Merge remote-tracking branch 'origin/main' into fix/auth-session-hardening
thomasluizon
committed
fc6d09a
fix(api): make logout-all concurrency-resilient + scope refresh partition to usable sessions (#243)

thomasluizon
and
claude
committed
9f1fa62
Merge remote-tracking branch 'origin/main' into fix/auth-session-hardening
thomasluizon
committed
8f7c094